ebpf
ebpf copied to clipboard
cilium
ebpf-go is a pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.
Add a generic wrapper around sync.Once which memoizes the result of a function call. Signed-off-by: Lorenz Bauer
In support of #284 this seemed like the most flexible option. Note: If you supply a custom group name, you cannot attach to the same symbol twice. I'm wondering if...
@arthurfabre reports that he'd like to be able to silence certain feature test errors, since his host kernel doesn't support CONFIG_FPROBE for example. I'd like to keep the default behaviour...
BTF has been extended over time to support new metadata, but older kernels refuse to load such extended BTF. This is a problem when loading a program that has been...
A Cilium contributor (@jrajahalme) tried running Cilium's BPF unit tests on an aarch64 kernel and received the following error: ``` --- FAIL: TestBPF (0.00s) bpf_test.go:149: new coll: map test_cilium_ipcache: map...
Does what it says on the tin, remove `+build` in favour of `//go:build`. To keep this straightforward, it uses a `[][]string` internally, and the template engine ORs all inner slices...
Hi. This PR supersedes #814. Compared to conventionnal perf buffer, an overwritable perf buffer never stops writing. Instead, the oldest data are overwritten by the newest. As a consequence, the...
Add Spec.Add, which allows creating BTF on the fly from outside of the btf package.